Sealed records
Privacy policy
General Mao collects as little as it can and still run a card game. There are no accounts, no advertising, no analytics trackers, and no third-party cookies. This page lists everything that is kept, where, and for how long.
Stored in your browser
Your browser's local storage keeps a random player identifier, the display name you choose, and a per-table seat token. These let you rejoin a table and keep your hand after a reload. They never leave your device except when sent to the table you are playing at, and clearing site data removes them.
Stored on our servers
While a table is live, its Durable Object holds the game state, the display names at the table, and the most recent chat messages. Finished matches may be archived with the table code, theme, player count, penalty count, winner's display name, and the revealed ruleset. Rulesets you write in Bring-your-own mode are stored so the match can enforce them.
To limit abuse, the game API counts table creations per IP address in a short-lived counter that expires after about a minute. Cloudflare, which hosts the site and API, processes standard request data such as IP addresses to deliver and protect the service.
The AI referee
When AI generation is enabled, ruleset requests and chat messages that might break a speech rule may be sent to Anthropic's Claude API so the General can judge them. That data is used only to referee your match. Display names and identifiers are not needed for that judgment.
Your choices
You can play without giving a real name. You can clear your browser storage at any time. To ask about or remove a stored record, see the contact page. The source code that implements all of this is public, so every claim here can be checked. The public API at general-mao-api.karthik-e5e.workers.dev is covered by this same policy.